IPS on a Stick

[v-bharath]

Hi All,

Could any one give a brief explanation on the concept of "IPS on a Stick", am not getting a clear picture with the docs... Thanks in advance...

[PAUL GILBERT ARIAS]

Not sure which docs you are viewing but my idea of it is just using on IPS appliance to inspect traffic inline between two VLANs. This IPS interface will have the two vlans paired and connected to a switch port configured as a trunk with the two vlans. You can have servers and PCs on one vlan and the gateway on the other vlan. That way all traffic leaving the network will have to cross through the IPS and get inspected.

Is this what you mean?

[v-bharath]

Hi Paul,

Thanks for the reply, so in that case both the inbound and outbound traffic passess in same physical interface?

[gaurash2]

Yes you are correct. Inbound and outbound traffic passes through  the same physical interface and the sensor performs vlan tag swapping if the packet is allowed after inspection.

[v-bharath]

Thanks Gaurav...

[PAUL GILBERT ARIAS]

Exactly

Sent from Cisco Technical Support iPhone App